Whether your organisation is renewing UK Cyber Essentials / Cyber Essentials Plus v3.3 (the "Danzell" specification) or answering EU NIS2 Article 21 / DORA supply-chain security questionnaires from enterprise customers, assessors keep failing domains on the same avoidable technical controls.

At FaultyPacket Security Lab , we built offline evidence scripts and live browser scanners to catch these gaps before your assessor or enterprise client does. Here is the exact technical checklist we run.

1. Passwordless, FIDO2 & Entra ID Conditional Access (Cyber Essentials v3.3)

Under the NCSC Cyber Essentials v3.3 ("Danzell") question set, three areas trip up Microsoft 365 / Entra ID and Google Workspace tenants:

Explicit Administrative Account Separation: Daily driver accounts (the ones receiving email and browsing the web) must not hold Global Admin, Privileged Role Admin, or Exchange Admin privileges.

MFA Coverage Across Every Cloud Service: Every user and admin account accessing cloud services must enforce…